Dir 816
Monthly
Critical stack-based buffer overflow vulnerability in the D-Link DIR-816 router (version 1.10CNB05) that allows remote attackers to execute arbitrary code without authentication. A public proof-of-concept exploit is available on GitHub, making this vulnerability actively exploitable. However, D-Link no longer supports this product, meaning no patch will be released.
Critical stack-based buffer overflow vulnerability in D-Link DIR-816 router firmware version 1.10CNB05, affecting the wireless configuration interface (/goform/form2WlanBasicSetup.cgi). A publicly available proof-of-concept exploit exists, allowing remote attackers without authentication to achieve complete system compromise. The vulnerability affects end-of-life products no longer supported by D-Link, making patches unlikely.
Critical stack-based buffer overflow vulnerability in the D-Link DIR-816 router (version 1.10CNB05) that allows remote attackers to achieve full system compromise without authentication. A public proof-of-concept exploit is available on GitHub, and the vulnerability affects end-of-life products no longer supported by D-Link, making this a high-risk issue for organizations still using these devices.
Critical stack-based buffer overflow vulnerability in the D-Link DIR-816 router (firmware version 1.10CNB05) that allows remote attackers to execute arbitrary code without authentication. A public proof-of-concept exploit is available, and the vulnerability affects end-of-life products no longer supported by D-Link, making this a high-risk issue for organizations still using these devices.
Command injection in D-Link DIR-816 firmware 1.10CNB05_R1B011D88210 allows a network-authenticated attacker to execute arbitrary OS commands by manipulating the ip_address argument passed to the portForward function without sanitization. A public proof-of-concept is available on GitHub, lowering the skill bar for exploitation. No CISA KEV listing exists, but EPSS places this at the 66th percentile, indicating greater exploitation likelihood than two-thirds of all tracked CVEs.
Command injection in D-Link DIR-816 firmware 1.10CNB05_R1B011D88210 allows authenticated remote attackers to execute arbitrary OS commands by manipulating the ip_address parameter in the /goform/singlePortForward endpoint. The root cause is the sub_445E7C function passing unsanitized user input directly to a system command (CWE-77), and a proof-of-concept exploit has been publicly disclosed on GitHub. No active exploitation has been confirmed by CISA KEV at time of analysis, though the EPSS score places this CVE at the 66th percentile for exploitation likelihood.
Command injection in D-Link DIR-816 firmware 1.10CNB05_R1B011D88210 allows a network-adjacent authenticated attacker to execute arbitrary OS commands by manipulating input passed to the sub_445E7C function via the /goform/formDMZ.cgi endpoint. A publicly available proof-of-concept exploit exists on GitHub, confirmed by VulDB and referenced in EUVD-2026-29345. No vendor patch has been identified at time of analysis, and the device's age and regional positioning suggest it may be unsupported, leaving affected deployments permanently exposed absent compensating controls.
CVE-2026-4180 is an authentication bypass vulnerability in the D-Link DIR-816 router (version 1.10CNB05) affecting the redirect.asp file in the goahead component, allowing remote attackers to gain unauthorized access without authentication. A public proof-of-concept exploit is available and the affected product is no longer supported by D-Link, making this vulnerability permanently unpatched.
Critical stack-based buffer overflow vulnerability in the D-Link DIR-816 router (version 1.10CNB05) that allows remote attackers to execute arbitrary code without authentication. A public proof-of-concept exploit is available on GitHub, making this vulnerability actively exploitable. However, D-Link no longer supports this product, meaning no patch will be released.
Critical stack-based buffer overflow vulnerability in D-Link DIR-816 router firmware version 1.10CNB05, affecting the wireless configuration interface (/goform/form2WlanBasicSetup.cgi). A publicly available proof-of-concept exploit exists, allowing remote attackers without authentication to achieve complete system compromise. The vulnerability affects end-of-life products no longer supported by D-Link, making patches unlikely.
Critical stack-based buffer overflow vulnerability in the D-Link DIR-816 router (version 1.10CNB05) that allows remote attackers to achieve full system compromise without authentication. A public proof-of-concept exploit is available on GitHub, and the vulnerability affects end-of-life products no longer supported by D-Link, making this a high-risk issue for organizations still using these devices.
Critical stack-based buffer overflow vulnerability in the D-Link DIR-816 router (firmware version 1.10CNB05) that allows remote attackers to execute arbitrary code without authentication. A public proof-of-concept exploit is available, and the vulnerability affects end-of-life products no longer supported by D-Link, making this a high-risk issue for organizations still using these devices.
Command injection in D-Link DIR-816 firmware 1.10CNB05_R1B011D88210 allows a network-authenticated attacker to execute arbitrary OS commands by manipulating the ip_address argument passed to the portForward function without sanitization. A public proof-of-concept is available on GitHub, lowering the skill bar for exploitation. No CISA KEV listing exists, but EPSS places this at the 66th percentile, indicating greater exploitation likelihood than two-thirds of all tracked CVEs.
Command injection in D-Link DIR-816 firmware 1.10CNB05_R1B011D88210 allows authenticated remote attackers to execute arbitrary OS commands by manipulating the ip_address parameter in the /goform/singlePortForward endpoint. The root cause is the sub_445E7C function passing unsanitized user input directly to a system command (CWE-77), and a proof-of-concept exploit has been publicly disclosed on GitHub. No active exploitation has been confirmed by CISA KEV at time of analysis, though the EPSS score places this CVE at the 66th percentile for exploitation likelihood.
Command injection in D-Link DIR-816 firmware 1.10CNB05_R1B011D88210 allows a network-adjacent authenticated attacker to execute arbitrary OS commands by manipulating input passed to the sub_445E7C function via the /goform/formDMZ.cgi endpoint. A publicly available proof-of-concept exploit exists on GitHub, confirmed by VulDB and referenced in EUVD-2026-29345. No vendor patch has been identified at time of analysis, and the device's age and regional positioning suggest it may be unsupported, leaving affected deployments permanently exposed absent compensating controls.
CVE-2026-4180 is an authentication bypass vulnerability in the D-Link DIR-816 router (version 1.10CNB05) affecting the redirect.asp file in the goahead component, allowing remote attackers to gain unauthorized access without authentication. A public proof-of-concept exploit is available and the affected product is no longer supported by D-Link, making this vulnerability permanently unpatched.